raidsonic nas-4220 crypt disk key leak (stored in plain on unencrypted partition)


Manufacturer: RaidSonic (www.raidsonic.de)
Device: NAS-4220-B
Firmware: 2.6.0-n(2007-10-11)
Device Type: end user grade NAS box
OS: Linux 2.6.15
Architecture: ARM
Designed by: Storm Semiconductor Inc (www.storlinksemi.com)


Problem:
Hard disk encryption key stored in plain on unencrypted partition.


Time line:
Found: 09. March 2008
Reported: 09. March 2008
Disclosed: 16. March 2008


Summary:
The NAS-4220-B offers disk encryption through it's web interface. The
key used for encrypting the disk(s) is stored on a unencrypted
partition. Therefore one can extract the encryption key by removing
the disk from the NAS and reading the value from the unencrypted
partition. The key itself is stored in a file in plain (base64
encoded). Therefore the NAS-4220 crypt disk support can not be
considered secure.


Details:
The NAS-4220-B can hold two SATA disks. Disk are encrypted through a
loop back device using AES128. The problem came to my attention when
I could access the NAS after reboot without suppling the hard disk key.

The key is stored in /system/.crypt, "/system" is a small
configuration partition on the same disk that holds the encrypted
partition. The system partition is created by the system software
running on the NAS-4220. The configuration partition of the second
hard disk is not mounted by default but also contains the .crypt file
holding the key for the encrypted partition on the same disk.


Accessing the key (key value is the example I used):
$ cat /system/.crypt
MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=

key in plain key in base64
12345678901234567890 MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=


Base64 decode:
#!/usr/bin/python
from base64 import *
print b64decode("MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=")


Reported by:
Collin Mulliner <collin(AT)betaversion.net >




Collin's Advisories: http://www.mulliner.org/security/advisories/

--
Collin R. Mulliner <collin@xxxxxxxxxxxxxxx>
BETAVERSiON Systems [www.betaversion.net]
info/pgp: finger collin@xxxxxxxxxxxxxxx
If you have to run heating in winter, you don't own enough computers.

Relevant Pages

  • Re: Partitioning a 100gb hard drive as 2 separate drives
    ... I need to split the hard disk for a C and a D ... One for Windows XP, ... load the XP disk and I get to the partition screen, ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Duplicating Hard Drives
    ... Most new hard drives come with a disk copy utility, ... and use that utility to dupe the hard disk. ... This assumes you have one partition. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Firefox Problem
    ... >> the GUI that the WinXP Disk Management ... It always seems to Create a Primary Partition as the *first* ... Partition on a Hard Disk (even if that Hard Disk is actually a ... That means trying to Create more than one Primary Partition on a Hard ...
    (uk.people.silversurfers)
  • [NEWS] Raidsonic NAS-4220 Crypt Disk Key Leak
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... NAS-4220-B offers disk encryption through it's web interface. ... NAS-4220 and reading the value from the unencrypted partition. ...
    (Securiteam)
  • Attack Scenarios against PGPs Whole Disk Encryption (WDE)
    ... Attack Scenarios against PGP's Whole Disk Encryption ... PGP's Whole Disk Encryption for Microsoft Windows encrypts all the ... As long as standard PC hardware and BIOS is used, the boot code of the disk ...
    (comp.security.pgp.tech)